Exploit / PoCcritical

Qualcomm Fixes 3 Zero-Days Used in Targeted Android Attacks via Adreno GPU

The Hacker Newsby @TheHackersNewsJun 2, 2025 · 14:22 UTC (Jun 2, 2025)1 min read11 · 6 reads

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-21479 CVE-2025-21480 CVE-2025-27038 CVE-2023-33063 CVE-2023-33106 CVE-2023-33107 CVE-2024-43047

Tags: cve-2025-21479 cve-2025-21480 cve-2025-27038 cve-2023-33063 cve-2023-33106 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-33106 +2 related CVEs CVE-2023-33107 CVE-2023-33063	Out-of-Range Pointer Memory Corruption in Qualcomm KGSL GPU Driver (Actively Exploited)	7.8	<1%	KEV	Dec 5, 2023 KEV Dec 5, 2023
CVE-2024-43047	Use-After-Free in Qualcomm FastConnect and QCA Chipset Firmware	7.8	<1%	KEV	Oct 7, 2024 KEV Oct 8, 2024
CVE-2025-21479 +2 related CVEs CVE-2025-21480 CVE-2025-27038	Incorrect Authorization in Qualcomm GPU Firmware Across Multiple Chipsets	8.6 group max	<1%	KEVPoC ×2	Jun 3, 2025 KEV Jun 3, 2025

From the original article

1 min read at thehackernews.com

Qualcomm has shipped security updates to address three zero-day vulnerabilities that it said have been exploited in limited, targeted attacks in the wild. The flaws in question, which were responsibly disclosed to the company by the Google Android Security team, are listed below - CVE-2025-21479 and CVE-2025-21480 (CVSS score: 8.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.